aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/service/firewall/blocker.go
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2019-05-03 18:11:40 +0200
committerJason A. Donenfeld <Jason@zx2c4.com>2019-05-03 18:11:40 +0200
commit4a9a8764def6f1a1a503707e17cce8a9dd41e469 (patch)
treea06d4230e604a719c867e9ace66196cc2ef1584f /service/firewall/blocker.go
parentfirewall: pass blob of security descriptor instead of raw, and give dacl (diff)
downloadwireguard-windows-4a9a8764def6f1a1a503707e17cce8a9dd41e469.tar.xz
wireguard-windows-4a9a8764def6f1a1a503707e17cce8a9dd41e469.zip
firewall: since DNS is a blacklist, we have to exclude our own interface
Diffstat (limited to 'service/firewall/blocker.go')
-rw-r--r--service/firewall/blocker.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/service/firewall/blocker.go b/service/firewall/blocker.go
index d0f39a90..8ef26278 100644
--- a/service/firewall/blocker.go
+++ b/service/firewall/blocker.go
@@ -198,7 +198,7 @@ func EnableFirewall(luid uint64, restrictDNS bool, restrictAll bool) error {
}
if restrictDNS {
- err = blockDnsUnmatched(session, baseObjects)
+ err = blockDnsNonTun(session, baseObjects, luid)
if err != nil {
return wrapErr(err)
}